APT NGINX Extras for Debian and Ubuntu
This site documents GetPageSpeed APT NGINX Extras: a rich collection of
NGINX dynamic modules packaged for Debian and Ubuntu via the
extras.getpagespeed.com repositories.
Each module page is generated automatically from upstream sources and annotated
with actual availability per suite (e.g. bookworm, bookworm-mainline,
bookworm-nginx-mod, jammy, jammy-mainline, jammy-nginx-mod,
noble-nginx-mod), so you always see only what is really published.
To get started, follow the APT repository setup guide, then browse the modules index to pick the features you need.
nginx-mod: a patched nginx for advanced setups
In addition to dynamic modules for stock nginx, the repository ships
nginx-mod: a GetPageSpeed-patched build of stable nginx with two extra
modules statically baked in (nginx_upstream_check_module for active health
checks, ngx_http_upstream_api_module for NGINX Plus-compatible dynamic
upstream management) and an opinionated patch set that adds, among others,
extended limit_req_rate units — r/h, r/d, r/w, r/M, r/Y for
rate-limiting per hour, day, week, month, or year.
nginx-mod is ABI-compatible with our stable nginx, so every
nginx-module-* package from the stable suite loads against it without
rebuild. The variant is published to per-codename nginx-mod suites:
- Ubuntu 22.04:
jammy-nginx-mod - Ubuntu 24.04:
noble-nginx-mod - Debian 12:
bookworm-nginx-mod
To use it, enable both the matching stable suite (for the dynamic modules)
and the <codename>-nginx-mod suite (for the binary). See the
nginx-mod section of the APT setup guide
for copy-paste install lines.
ModSecurity + OWASP Core Rule Set
For web application firewall protection, the repository ships the
ModSecurity-nginx connector (nginx-module-security) together with the
OWASP ModSecurity Core Rule Set as the data-only package
nginx-owasp-crs. Install paths match the RPM side 1:1, so the
install guide for ModSecurity + nginx
applies verbatim on Debian and Ubuntu — just swap dnf for apt.
sudo apt-get install nginx-module-security nginx-owasp-crs
Rules land under /etc/nginx/owasp-modsecurity-crs/ with a ready-to-use
include manifest at /etc/nginx/modsec_includes.conf.